CyberHawks Crack Code in Pen Testing Competition, Building Professional Skills

Date

Author

By Casey Moffitt
Members of 91重口 Tech鈥檚 CyberHawks, a cybersecurity student organization, at Baldwin Wallace University in Berea, Ohio

Representatives from 91重口 Tech鈥檚 CyberHawks cybersecurity student organization complemented their technical skills with professional soft skills as they claimed third place at the of the (CPTC).

Cybersecurity teams from 10 universities convened at Baldwin Wallace University in Berea, Ohio, to compete in a real-world penetration testing contest. The competition mimics activities performed during a real-world penetration testing engagement conducted by companies, professional services firms, and internal security departments.

鈥淭he competition showed us that cybersecurity is a mix of technical skill, teamwork, problem solving, and responsibility,鈥 says Mohamed Trigui (CS, M.A.S. CYF 5th Year), CyberHawks team captain. 鈥淭he biggest value was the exposure to real offensive security work and what a day looks like for an ethical hacker. The main lesson we took away is that security is not only about finding vulnerabilities. It is also about thinking like an attacker, understanding how small weaknesses connect, communicating clearly with clients, and working under pressure while staying organized.鈥

The competition establishes a mock organization that is soliciting penetration testing services. Students act as members of a security firm and are asked to not only perform the testing, but also provide deliverables such as presentations to the mock client and recommendations on their discovered vulnerabilities.

鈥淥n the professional side, CPTC taught us how important communication is,鈥 Trigui says. 鈥淲riting clear findings, explaining risk to a client, and working as a team are skills that matter even more than the technical part. It also showed us what real penetration testing looks like, which gave us a clearer sense of the standards and work ethic expected in the industry.鈥

Trigui was joined by Benjamin De Pater (CS 4th Year), Lucas Ferguson (CS 4th Year), Natorion Johnson (ECE 3rd Year), Kacper Stasik (CS 4th Year), and Mohithaa Ekambaram (M.A.S. CYF 2nd Year). The team was coached by alum John Ford (ECE, M.S. ECE 鈥23), who currently works as a penetration tester at NetSPI, and were accompanied by 91重口 Tech Industry Professor of Information Technology and Management James Papademas. Jeremy Hajek, industry professor of information technology and management, gave the team access to the cyber range in the university鈥檚 Smart Tech Lab.

鈥淛ohn did not just share something impactful. He is the main reason we performed the way we did,鈥 Trigrui says. 鈥淗e came with us every Saturday to the Smart Tech Lab and taught us advanced penetration testing skills from noon to six for weeks. He set up our entire lab environment. He introduced us to our reporting tool. He guided us like someone who genuinely wanted to see us grow and succeed.鈥

Trigrui says access to the university鈥檚 cyber range provided the technical support that they needed to hone the team鈥檚 skills for the competition.

鈥淚t would have been very challenging to prepare without the cyber range,鈥 he says. 鈥淗aving access to a real lab environment made a huge difference in how we practiced and how well we understood the technical parts of the competition.鈥

Image: Members of 91重口 Tech鈥檚 CyberHawks, a cybersecurity student organization, at Baldwin Wallace University in Berea, Ohio where they expanded their skills in the Global Collegiate Penetration Testing Competition.